Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa
File:                     a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json)
Hash identifier:          +v0UfXI/FDJsqCzBUJHWZcJgAP6nctCxTQEuz3Zc+j0=
Subject key identifier:   52:F3:CA:BF:54:0A:FD:B0:5F:F4:49:82:59:59:19:E2:25:34:13:54
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285845BD92C4E2AED7452905A44500
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa
Signing time:             Thu 02 May 2024 15:29:34 +0000
ROA not before:           Thu 02 May 2024 15:29:34 +0000
ROA not after:            Wed 31 Jul 2024 15:29:34 +0000
asID:                     21949
IP address blocks:        96.45.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:92:c4:e2:ae:d7:45:29:05:a4:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May  2 15:29:34 2024 GMT
            Not After : Jul 31 15:29:34 2024 GMT
        Subject: CN=513ff220-ea65-4214-9c1b-eeb910bfdb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:f3:3d:c3:9f:15:65:96:4f:88:d8:56:b1:
                    4d:20:15:d2:58:e4:0e:3d:95:0f:32:49:44:3e:09:
                    93:d4:c1:20:bc:6f:01:5b:d3:0a:b8:d3:61:14:09:
                    e5:a4:13:9d:64:09:82:5b:cb:66:25:f6:24:37:f0:
                    38:95:40:87:e7:57:6b:1c:eb:15:c0:6b:76:3e:d4:
                    1d:15:d2:86:8a:c2:2c:ee:8d:e9:a1:cd:3f:01:53:
                    43:6c:5c:c3:e0:08:41:e4:66:a7:f5:7a:e7:23:32:
                    0e:01:f9:61:e7:da:ba:91:a0:be:d6:e0:60:3f:13:
                    76:8e:a2:ae:62:99:0a:7b:0a:de:7e:dd:d1:11:98:
                    a4:0f:04:99:c7:5b:4f:ed:ce:b2:1e:7c:87:c3:04:
                    e8:c2:0f:3c:bd:38:83:d2:54:78:7a:9c:45:a4:ca:
                    1a:67:14:64:22:44:1f:4e:a5:f5:59:59:a4:f0:c3:
                    c8:f4:a1:b2:47:2b:5d:0a:f5:01:48:b6:a4:61:27:
                    ea:0d:4a:a9:94:ea:78:1a:36:91:94:ba:46:67:29:
                    9b:49:65:40:a3:4a:de:cf:2a:fb:1f:86:9d:df:54:
                    36:7a:ad:e0:15:83:97:eb:21:97:14:36:97:62:66:
                    32:74:0c:77:a1:ee:d4:b1:58:1d:2b:8f:f6:e8:39:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:CA:BF:54:0A:FD:B0:5F:F4:49:82:59:59:19:E2:25:34:13:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:05:6b:da:8d:98:12:cc:c1:b7:83:02:44:2a:89:fa:e3:
         5a:da:c3:e3:5d:d2:8c:35:17:7b:ca:22:93:12:db:e5:25:d1:
         c0:c5:92:af:23:8b:cf:5d:bc:a2:e3:7b:13:8b:60:28:84:b7:
         e9:74:bf:74:b9:af:1d:66:be:2c:df:4f:31:e8:c3:27:b1:17:
         1d:f8:53:d2:98:3c:9f:aa:2e:df:30:ee:a4:5c:0b:0f:88:f4:
         c2:c7:d5:f6:28:3a:13:29:d1:e4:c7:43:0d:b3:a3:72:5b:ce:
         91:9b:fc:b3:d5:70:c8:83:5d:2d:4c:ab:bf:3b:6b:2a:93:69:
         9b:6d:2d:9e:4c:e6:6a:9c:16:09:24:fa:ec:79:26:b6:50:00:
         9c:35:80:9d:0d:cd:2a:a0:5f:33:f7:03:26:49:ef:b2:ba:ba:
         bd:77:95:61:be:e6:2b:2a:77:d1:d2:0f:bf:14:bf:f4:f8:85:
         ec:4b:89:3b:7b:93:69:83:85:21:72:e7:6c:33:bf:21:bc:d4:
         85:9f:7a:ce:86:c0:21:5e:26:4f:07:fc:56:d5:00:f7:e0:18:
         2b:3b:bb:a1:27:08:36:e1:52:51:58:05:f5:26:e3:43:1d:9e:
         1c:ec:93:fa:4d:c2:8d:c0:20:23:e2:0d:26:ed:b5:cf:81:17:
         1e:ac:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:24 2024 by rpki-client on console-ams.rpki-client.org